SZB-6d2407a376
ESET disk encryption products have access control flaw (EUVD-2026-113905)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- ESET
- Product
- ESET Full Disk Encryption, ESET Endpoint Encryption
- First seen
Summary
The EUVD entry, as relayed on Mastodon, describes an improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption, scored 8.5 (CVSS v3.1). It says an attacker with standard user permissions could access a device interface belonging to a privileged kernel component.
If you use ESET
Update ESET Full Disk Encryption and ESET Endpoint Encryption to the fixed versions in ESET's advisory.
Limit local standard-user access on managed endpoints until patched.
What the sources say 1
· Mastodon: “An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kerne” Source